[CLSA-2026:1788263274] Fix CVE(s): CVE-2025-58767
Type:
security
Severity:
Moderate
Release date:
2026-09-01 11:48:06 UTC
Description:
* SECURITY UPDATE: denial of service in the bundled REXML gem - CVE-2025-58767: REXML::Parsers::BaseParser accepted an unlimited number of XML declarations per document, so parsing invalid XML containing multiple XML declarations caused increased execution time and memory usage. - added debian/patches/CVE-2025-58767.patch
CVEs fixed:
Updated packages:
  • alt-ruby35_3.5.0~preview1-5_amd64.deb
    sha:85a1a643c25989383d8be722b9ae8cd18ee1701e
  • alt-ruby35-bundled-gems_3.5.0~preview1-5_amd64.deb
    sha:c72044bbf97ecb5001c69477dd5583c52532a15a
  • alt-ruby35-default-gems_3.5.0~preview1-5_amd64.deb
    sha:031dfc5737f7305eaac2ce7640c95aa47a16c88e
  • alt-ruby35-devel_3.5.0~preview1-5_amd64.deb
    sha:817070589eaff4250ba5b782a61d980bdac83918
  • alt-ruby35-doc_3.5.0~preview1-5_amd64.deb
    sha:e14a8c5d22b4dacf8e58ba1d9978f26875c4a43f
  • alt-ruby35-libs_3.5.0~preview1-5_amd64.deb
    sha:2f5c3553559ae0d1e366d0f7ffd55a36a4f72385
  • alt-ruby35-rubygem-bigdecimal_3.1.9-5_amd64.deb
    sha:d32ebeca8aa8ae5cd6e5efd3ecae300232238275
  • alt-ruby35-rubygem-bundler_2.7.0.dev-5_amd64.deb
    sha:57c97e9d9f0cafebc408a355711c31ce1364d8d0
  • alt-ruby35-rubygem-io-console_0.8.0-5_amd64.deb
    sha:5dee7ee2e28da1a582bfb579b8213851e65e7c53
  • alt-ruby35-rubygem-irb_1.15.2-5_amd64.deb
    sha:fa4e50ba61e145d37565606701825633085a9a18
  • alt-ruby35-rubygem-json_2.10.2-5_amd64.deb
    sha:cf17287812b2708a60826178f3bdbfa05a536bc5
  • alt-ruby35-rubygem-minitest_5.25.5-5_amd64.deb
    sha:2095895c598b8cf6ca6ea4789f13035d66009542
  • alt-ruby35-rubygem-power-assert_2.0.5-5_amd64.deb
    sha:88cba5427def37ebb6009e06496c9dc961fbe34c
  • alt-ruby35-rubygem-psych_5.2.3-5_amd64.deb
    sha:ff869aea04dc43c4b7d570c97e90ee88451edee8
  • alt-ruby35-rubygem-racc_1.8.1-5_amd64.deb
    sha:a9cef4c7181bbc65059a22bfbdbfd4ac5656ee8e
  • alt-ruby35-rubygem-rake_13.2.1-5_amd64.deb
    sha:7eda8340b6f0dffc02aed7a09df9f8202cc7645d
  • alt-ruby35-rubygem-rbs_3.9.2-5_amd64.deb
    sha:5cbd376a78ac547048a8e3e76c01f941e17e3f1f
  • alt-ruby35-rubygem-rdoc_6.13.1-5_amd64.deb
    sha:2255f9803e8709f70780af728f1bd7a02b251de7
  • alt-ruby35-rubygem-rexml_3.4.1-5_amd64.deb
    sha:d2e1f56cd8378db774a75ad79e17ae10c08c0d9c
  • alt-ruby35-rubygem-rss_0.3.1-5_amd64.deb
    sha:5a6bb25889b51b30ad720c54f0906ce4aa8b3b3c
  • alt-ruby35-rubygem-test-unit_3.6.8-5_amd64.deb
    sha:3d9413fa0c9ed044c938af315fe462ad30d80459
  • alt-ruby35-rubygem-typeprof_0.30.1-5_amd64.deb
    sha:a9b7e3b3d7d3e15b76c0cc87a18b10e463374fcc
  • alt-ruby35-rubygems_3.7.0.dev-5_amd64.deb
    sha:7a2e1d4c2da79444359c5083232a432bfa6f200b
  • alt-ruby35-rubygems-devel_3.7.0.dev-5_amd64.deb
    sha:d58c099324c6b54d58cea665e715a2332a46ab57
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.